registry / @studiometa/forge-mcp / 0.4.6

@studiometa/forge-mcp@0.4.6

MCP server for Laravel Forge — Model Context Protocol integration for AI agents

Static Scan Results

scanned 13h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 164 KB of source, external domains: forge.laravel.com, github.com, www.w3.org

Source & flagged code

4 flagged

dist/version-BS77BDou.jsView file

Lines 2453-2542javascript

2453 action: "activate",

2454 server_id: "123",

2455 site_id: "456",

2456 domain_id: "789"

2457 }

2458 }

2459 ]

2460 },

2461 databases: {

2462 description: "Manage MySQL/PostgreSQL databases on a server",

2463 scope: "server (requires server_id)",

2464 actions: {

2465 list: "List databases on a server",

2466 get: "Get database details",

2467 create: "Create a new database (optionally with user)",

2468 delete: "Delete a database"

2469 },

2470 fields: {

2471 name: "Database name",

2472 user: "(create only) Create a database user",

2473 password: "(create only) User password"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/version-BS77BDou.jsView on unpkg · L2473

2474 },

2475 examples: [{

2476 description: "List databases",

2477 params: {

2478 resource: "databases",

2479 action: "list",

2480 server_id: "123"

2481 }

2482 }, {

2483 description: "Create database with user",

2484 params: {

2485 resource: "databases",

2486 action: "create",

2487 server_id: "123",

2488 name: "myapp",

2489 user: "admin",

2490 password: "secret123"

Medium

Secret Pattern

Hardcoded password in dist/version-BS77BDou.js

dist/version-BS77BDou.jsView on unpkg · L2490

2491 }

2492 }]

2493 },

2494 "database-users": {

2495 description: "Manage database users on a server",

2496 scope: "server (requires server_id)",

2497 actions: {

2498 list: "List database users on a server",

2499 get: "Get database user details",

2500 create: "Create a new database user",

2501 delete: "Delete a database user"

2502 },

2503 fields: {

2504 name: "Database user name",

2505 password: "User password",

Medium

Secret Pattern

Hardcoded password in dist/version-BS77BDou.js

dist/version-BS77BDou.jsView on unpkg · L2505

2506 databases: "(create only) Array of database IDs to grant access to"

2507 },

2508 examples: [{

2509 description: "List database users",

2510 params: {

2511 resource: "database-users",

2512 action: "list",

2513 server_id: "123"

2514 }

2515 }, {

2516 description: "Create a database user",

2517 params: {

2518 resource: "database-users",

2519 action: "create",

2520 server_id: "123",

2521 name: "forge",

2522 password: "secret123",

Medium

Secret Pattern

Hardcoded password in dist/version-BS77BDou.js

dist/version-BS77BDou.jsView on unpkg · L2522

2523 databases: [1, 2]

2524 }

2525 }]

2526 },

2527 daemons: {

2528 description: "Manage background processes (daemons) — queue workers, websocket servers, etc.",

2529 scope: "server (requires server_id)",

2530 actions: {

2531 list: "List daemons on a server",

2532 get: "Get daemon details",

2533 create: "Create a new daemon",

2534 delete: "Delete a daemon",

2535 restart: "Restart a daemon",

2536 log: "Get the latest daemon log output"

2537 },

2538 fields: {

2539 command: "Shell command to run",

2540 user: "Execution user (default: forge)",

2541 directory: "Working directory",

2542 processes: "Number of processes (default: 1)"

Source & flagged code

4 flagged · loading source

dist/version-BS77BDou.jsView file

2473patternName = generic_password severity = medium line = 2473 matchedText = password...ord"

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code